You can add managed subtrees from specific Microsoft Windows domains after you install the Administration server. You can add any missing subtrees you want to manage through the Advanced Configuration node in the Delegation and Configuration console. To add managed subtrees after you install the Administration server, you must have the appropriate powers, such as those included in the built-in Configure Servers and Domains role. To ensure the specified access account has permissions to manage this subtree and perform incremental accounts cache refreshes, use the Deleted Objects utility to verify and delegate the appropriate permissions. For more information about using this utility, see the Administrator Guide for Directory Resource Administrator and Exchange Administrator. For more information about setting up the access account, see Section 1.0, Understanding Requirements.
NOTE:After you finish adding managed subtrees, ensure that the accounts cache refresh schedules for the corresponding domains are correct. For more information about modifying the accounts cache refresh schedule, see the Administrator Guide for Directory Resource Administrator and Exchange Administrator.